$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa File: 22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa (raw, json) Hash identifier: UIdhKWK27Ox6FcMsNaQi5PcNZYt4k6hOM8x1SPmq30c= Subject key identifier: B8:EB:B1:D0:09:58:7E:8E:63:D7:94:87:E3:4B:17:7C:39:DD:78:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 132A424BE462242076C34AFDFD3AF40014B6FE0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa Signing time: Sun 01 Mar 2026 00:30:18 +0000 ROA not before: Sun 01 Mar 2026 00:30:18 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.60.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2a:42:4b:e4:62:24:20:76:c3:4a:fd:fd:3a:f4:00:14:b6:fe:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:30:18 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=e4a2c110bd50464662a0c699d8d4bf771570904645d4b54059a444f89b953803, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e4:aa:c3:52:fd:28:31:af:3e:0a:fb:d9:91: 09:a1:46:c9:65:c1:e3:19:1c:25:3e:b9:b1:3d:8a: 2e:cd:21:17:8e:6f:0b:c9:38:c7:81:d9:a5:e6:51: 2a:db:d3:7e:a7:f9:3f:4f:47:ff:10:7d:1d:ee:11: 5a:78:44:53:49:11:1b:ac:4c:cf:bf:95:df:21:da: ff:ba:3d:36:6a:0f:01:19:1b:4b:5d:bb:32:84:7b: b1:f8:5f:0a:b5:8b:a6:e9:0d:98:92:01:0e:c2:e3: 63:e4:1a:1d:80:51:b4:af:8a:96:fa:02:76:08:b7: 1a:cb:85:f3:7c:84:99:59:e5:a3:f5:eb:c3:1a:de: 95:5f:7a:44:40:b2:50:0a:69:85:79:90:ca:eb:3a: 41:37:10:9a:ec:e8:6d:3b:66:03:52:59:11:ad:d7: 03:44:e2:8c:13:b8:36:b8:c5:c2:52:20:32:67:b4: 5a:dc:99:65:f3:9f:4a:74:6e:95:1b:b9:97:87:4f: 15:31:af:43:10:28:73:71:69:eb:6d:76:4c:27:f5: c0:13:dd:31:07:24:83:17:7e:c3:8b:bb:a1:6e:c4: fa:5e:58:34:7a:3f:f7:9e:46:70:d1:ee:76:3a:69: 92:7d:fa:d9:01:a4:69:00:7f:5f:54:23:ef:af:6e: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:B1:D0:09:58:7E:8E:63:D7:94:87:E3:4B:17:7C:39:DD:78:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22c0e5ed-c1f6-43d2-b730-3379c8a6d9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.60.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5e:ac:22:99:a3:b4:87:bc:cc:9c:d8:6a:7e:74:74:dc:78:25: d1:e8:ea:89:86:74:73:ce:0f:07:cc:b1:b0:2d:8f:c6:9c:03: b0:29:c7:bb:af:54:14:fa:4a:83:95:b6:4d:3d:3b:33:d6:1a: b8:61:c1:32:77:60:6e:ee:16:f3:ad:52:03:a2:16:73:2b:43: 30:74:7c:e7:43:5c:dc:db:8a:2f:1e:ac:a2:b5:50:bd:75:2f: 44:2c:a5:70:21:8b:a2:92:8e:9e:54:d7:39:03:86:29:fc:f8: fe:09:31:b1:be:08:c3:ea:b7:68:0b:ff:d8:58:17:41:58:89: 72:c5:83:cb:56:b1:c5:e5:81:bc:5a:f6:c7:ca:72:5e:f3:d1: b1:56:3e:76:4f:3e:eb:c6:4b:67:b1:e1:0b:4d:92:22:bb:71: 60:c4:85:a9:91:48:fc:47:98:c4:f8:b0:5b:40:4c:9f:09:4e: 40:54:01:0e:75:fe:44:3f:0e:7c:98:63:de:14:c9:19:7a:b5: 61:35:4c:c8:bc:ce:9d:5c:86:55:a7:68:2a:80:63:4d:20:75: 61:3a:c3:65:f8:ef:09:e2:f7:b2:bc:f9:0c:b7:14:6f:51:03: 2c:52:a0:40:83:64:7b:71:8d:e5:ee:2d:17:21:1a:45:f5:eb: 88:00:c9:d9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEypCS+RiJCB2w0r9/Tr0ABS2/gswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAzMDE4WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGEyYzExMGJkNTA0NjQ2NjJhMGM2OTlkOGQ0YmY3NzE1 NzA5MDQ2NDVkNGI1NDA1OWE0NDRmODliOTUzODAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDw5KrDUv0oMa8+CvvZkQmhRsllweMZHCU+ubE9ii7NIReO bwvJOMeB2aXmUSrb036n+T9PR/8QfR3uEVp4RFNJERusTM+/ld8h2v+6PTZqDwEZ G0tduzKEe7H4Xwq1i6bpDZiSAQ7C42PkGh2AUbSvipb6AnYItxrLhfN8hJlZ5aP1 68Ma3pVfekRAslAKaYV5kMrrOkE3EJrs6G07ZgNSWRGt1wNE4owTuDa4xcJSIDJn tFrcmWXzn0p0bpUbuZeHTxUxr0MQKHNxaettdkwn9cAT3TEHJIMXfsOLu6FuxPpe WDR6P/eeRnDR7nY6aZJ9+tkBpGkAf19UI++vbjUrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuOux0AlYfo5j15SH40sXfDndeJQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYzBlNWVkLWMxZjYtNDNkMi1iNzMwLTMzNzljOGE2ZDlkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEjPDANBgkqhkiG9w0BAQsFAAOCAQEAXqwimaO0h7zMnNhqfnR03Hgl0ejq iYZ0c84PB8yxsC2PxpwDsCnHu69UFPpKg5W2TT07M9YauGHBMndgbu4W861SA6IW cytDMHR850Nc3NuKLx6sorVQvXUvRCylcCGLopKOnlTXOQOGKfz4/gkxsb4Iw+q3 aAv/2FgXQViJcsWDy1axxeWBvFr2x8pyXvPRsVY+dk8+68ZLZ7HhC02SIrtxYMSF qZFI/EeYxPiwW0BMnwlOQFQBDnX+RD8OfJhj3hTJGXq1YTVMyLzOnVyGVadoKoBj TSB1YTrDZfjvCeL3srz5DLcUb1EDLFKgQINke3GN5e4tFyEaRfXriADJ2Q== -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:15 2026 by rpki-client